CP Plus CP-E38Q UART Interface cleartext storage

Summaryinfo

A vulnerability was found in CP Plus CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q and CP-Z45Q. It has been declared as problematic. This issue affects some unknown processing of the component UART Interface. The manipulation results in cleartext storage. This vulnerability is known as CVE-2026-9274. An attack on the physical device is feasible. No exploit is available.

Detailsinfo

A vulnerability classified as problematic has been found in CP Plus CP-E38Q, CP-E48Q, CP-E25Q, CP-E35Q, CP-E45Q, CP-E28Q, CP-E21Q, CP-E31Q, CP-E41Q, CP-E24Q, CP-Z43Q, CP-E34Q, CP-E44Q, CP-T31Q, CP-V48Q, CP-V41Q and CP-Z45Q. Affected is some unknown processing of the component UART Interface. The manipulation with an unknown input leads to a cleartext storage vulnerability. CWE is classifying the issue as CWE-312. The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. This is going to have an impact on confidentiality. CVE summarizes:

This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing the UART interface and performing memory extraction to obtain sensitive information, including cryptographic private keys, Wi-Fi credentials and configuration data stored in RAM of the targeted device. Successful exploitation of this vulnerability could allow unauthorized access to encrypted communications and connected wireless network of the targeted device.

The weakness was published by Mohsin Quresh as CIVN-2026-0266. The advisory is available at cert-in.org.in. This vulnerability is traded as CVE-2026-9274 since 05/22/2026. The exploitability is told to be easy. Local access is required to approach this attack. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1555 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-31661). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• CP Plus

Name

• CP-E21Q
• CP-E24Q
• CP-E25Q
• CP-E28Q
• CP-E31Q
• CP-E34Q
• CP-E35Q
• CP-E38Q
• CP-E41Q
• CP-E44Q
• CP-E45Q
• CP-E48Q
• CP-T31Q
• CP-V41Q
• CP-V48Q
• CP-Z43Q
• CP-Z45Q

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion